Security update for cups (important)

2018-03-0515:11:52

lists.opensuse.org

0.003 Low

EPSS

Percentile

67.9%

JSON

This update for cups fixes the following issues:

CVE-2017-18190: Removed localhost.localdomain from list
of trustworthy hosts in scheduler/client.c to avoid arbitrary IPP
command execution in conjunction with DNS rebinding. (bsc#1081557)

OSVersionArchitecturePackageVersionFilename
SUSE Linux Enterprise Software Development Kit12.2x86_64cups-debuginfo< 1.7.5-20.3.1cups-debuginfo-1.7.5-20.3.1.x86_64.rpm
SUSE Linux Enterprise Server for SAP12.1x86_64cups-libs-debuginfo-32bit< 1.7.5-20.3.1cups-libs-debuginfo-32bit-1.7.5-20.3.1.x86_64.rpm
SUSE Linux Enterprise Server LTSS12.1s390xcups-debugsource< 1.7.5-20.3.1cups-debugsource-1.7.5-20.3.1.s390x.rpm
SUSE Linux Enterprise Software Development Kit12.2x86_64cups-debugsource< 1.7.5-20.3.1cups-debugsource-1.7.5-20.3.1.x86_64.rpm
SUSE Linux Enterprise Server for Raspberry Pi12.2aarch64cups-client-debuginfo< 1.7.5-20.3.1cups-client-debuginfo-1.7.5-20.3.1.aarch64.rpm
SUSE Linux Enterprise Server12.3x86_64cups-client-debuginfo< 1.7.5-20.3.1cups-client-debuginfo-1.7.5-20.3.1.x86_64.rpm
SUSE OpenStack Cloud6x86_64cups-client-debuginfo< 1.7.5-20.3.1cups-client-debuginfo-1.7.5-20.3.1.x86_64.rpm
SUSE Linux Enterprise Server12.3ppc64lecups-debuginfo< 1.7.5-20.3.1cups-debuginfo-1.7.5-20.3.1.ppc64le.rpm
SUSE Linux Enterprise Server12.3ppc64lecups-libs< 1.7.5-20.3.1cups-libs-1.7.5-20.3.1.ppc64le.rpm
SUSE Linux Enterprise Software Development Kit12.3aarch64cups-devel< 1.7.5-20.3.1cups-devel-1.7.5-20.3.1.aarch64.rpm

OS	Version	Architecture	Package	Version	Filename
SUSE Linux Enterprise Software Development Kit	12.2	x86_64	cups-debuginfo	< 1.7.5-20.3.1	cups-debuginfo-1.7.5-20.3.1.x86_64.rpm
SUSE Linux Enterprise Server for SAP	12.1	x86_64	cups-libs-debuginfo-32bit	< 1.7.5-20.3.1	cups-libs-debuginfo-32bit-1.7.5-20.3.1.x86_64.rpm
SUSE Linux Enterprise Server LTSS	12.1	s390x	cups-debugsource	< 1.7.5-20.3.1	cups-debugsource-1.7.5-20.3.1.s390x.rpm
SUSE Linux Enterprise Software Development Kit	12.2	x86_64	cups-debugsource	< 1.7.5-20.3.1	cups-debugsource-1.7.5-20.3.1.x86_64.rpm
SUSE Linux Enterprise Server for Raspberry Pi	12.2	aarch64	cups-client-debuginfo	< 1.7.5-20.3.1	cups-client-debuginfo-1.7.5-20.3.1.aarch64.rpm
SUSE Linux Enterprise Server	12.3	x86_64	cups-client-debuginfo	< 1.7.5-20.3.1	cups-client-debuginfo-1.7.5-20.3.1.x86_64.rpm
SUSE OpenStack Cloud	6	x86_64	cups-client-debuginfo	< 1.7.5-20.3.1	cups-client-debuginfo-1.7.5-20.3.1.x86_64.rpm
SUSE Linux Enterprise Server	12.3	ppc64le	cups-debuginfo	< 1.7.5-20.3.1	cups-debuginfo-1.7.5-20.3.1.ppc64le.rpm
SUSE Linux Enterprise Server	12.3	ppc64le	cups-libs	< 1.7.5-20.3.1	cups-libs-1.7.5-20.3.1.ppc64le.rpm
SUSE Linux Enterprise Software Development Kit	12.3	aarch64	cups-devel	< 1.7.5-20.3.1	cups-devel-1.7.5-20.3.1.aarch64.rpm